How to disable SSLv3 on server or client for webMethods 8.0.1

, ,
1

Hi,
Because of the poodle bug,we need to disable SSLv3 on server or client.I read the document of IS administratoring.

As client,maybe set watt.net.ssl.client.handshake.maxVersion=tls,watt.net.ssl.client.handshake.minVersion=sslv2.But I am not sure. Perhaps any other extended settings should be set.
As server,I can’t see any topic about it.

Any information regarding this topic will be highly appreciated.Thanks in advance.

Thanks and Regards.
Ralen.

2

Hi Lei,

did you have a look at Empower?
There is a Security Advisory and a KB-Article related to this.

You will need to apply some wM-Fixes to get this working, but I am not sure if they provided for wM 8.0.

Maybe this will be point on which a migration to 9.5 should be considered.

Regards,
Holger